Privacy Policy
Last updated: February 2026
1. Information We Collect
When you create an account, we collect your email address and basic profile information. When you connect an exchange, we store encrypted API credentials (trade-only, no withdrawal access). We log bot activity, trading decisions, and performance data to provide our service and improve it.
2. How We Use Your Information
Your data is used to operate the trading service, provide performance analytics, and improve our AI models. We do not sell your personal data to third parties. Aggregated, anonymised trading data may be used for research purposes.
3. Data Security
All API keys are encrypted with AES-256-GCM before storage. Data is transmitted over TLS. We use Supabase for data storage with row-level security policies. Your exchange funds remain in your exchange at all times — we never have withdrawal access.
4. Data Retention
Account data is retained while your account is active. Trading logs and performance data are retained for analytical purposes. You can request deletion of your account and associated data at any time by contacting support.
5. Third-Party Services
We use third-party services including Supabase (database), Vercel (hosting), OpenRouter (AI models), and your connected exchange APIs. Each service has its own privacy policy. We share only the minimum data required for each service to function.
6. Your Rights
You have the right to access, correct, or delete your personal data. You can disconnect exchange API keys at any time through the dashboard or directly through your exchange. For data requests, contact us at support@transit.trading.
7. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes via email or through the dashboard.